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MATHEMATICAL  MODELS  FOR  MAINTAINABILITY 
Period;  1 October  1975  - 30  September  1978 

Our  main  goal  on  this  project  has  been  to  develop  theory  and  analytical 
techniques  for  modeling  and  analyzing  maintained  systems.  In  order  to  accom- 
plish this  goal  we  have,  in  conjunction  with  the  Lawrence  Berkeley  Laboratory, 
analyzed  maintenance  records  of  the  nuclear  accelerator  Superhilac  with 
respect  to  system  availability  and  reliability  ([1],  [2]).  This  has  afforded 
us  the  opportunity  to  try  out  new  techniques  for  analyzing  system  maintenance 
data  and  has  also  suggested  problems  for  further  research.  Our  analysis 
technique  in  [1]  consisted  (after  first  screening  the  data)  of  using  time 
series  methods  to  detect  time  dependencies  followed  by  total  time  on  test 
plots  of  system  and  subsystem  uptimes  and  downtimes.  Recommendations  relative 
to  improved  maintenance  policies  were  then  made  based  on  this  information. 

In  [2]  a more  detailed  analysis  of  the  Superhilac  Radio  Frequency  Subsystem  was 
made.  Computer  programs  used  in  the  maintenance  data  analysis  are  given  there. 

Recent  graphical  multivariate  techniques  for  analyzing  failure  and  repair 
data  were  described  in  an  invited  talk  at  the  Twenty-fourth  Conference  On 
The  Design  of  Experiments  in  Army  Researchy  Development  and  Testing } at  the 
Methematics  Research  Center,  Madison,  Wisconsin,  4-6  October  1978.  Using 
up  and  down  time  data  from  a nuclear  power  plant  three  dimensional  plots  were 
displayed  which  demonstrated  the  positive  correlation  and  nature  of  the  failure 
rate  and  repair  rate.  This  research  is  still  in  process. 

In  analyzing  the  Bevalac  Data  it  quickly  became  apparent  that  we  should 
consider  the  effect  of  various  shut-off  policies.  For  example,  a Computer 
Hardware  failure  will  shut  down  the  Magnet  Power  Supply,  but  not  vice  versa. 

As  a consequence,  we  have  recently  completed  work  on  a paper,  "Availability 
Theory  for  Systems  Whose  Components  are  Subject  to  Various  Shut-off  Policies," 
[3].  In  this  paper  we  investigate  in  depth  the  consequences  of  various 
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shut-off  policies.  Availability  and  related  formulas  now  involve  more 
than  the  means  of  the  distributions  involved.  However,  comparisons  with 
the  case  of  all  exponential  life  and  repair  distributions  can  be  given  in 
terms  of  IFR  and  DFR  lifetime  and  repair  distributions. 

A post-doctoral  student,  Eduardo  Subelman  was  partially  supported  by 
this  grant  in  1977-78.  He  has  been  working  on  the  problem  of  determining 
the  optimal  maintenance  policy  for  a system  under  the  assumption  of  a finite 
planning  horizon.  He  assumes  that  the  expected  operating  and  repair  costs 
of  a system  are  convex  increasing  functions  of  the  time  elapsed  since  the 
system  was  last  maintained.  Under  these  hypotheses  he  has  determined  the 
structure  of  policy  that  minimizes  the  expected  operations  and  maintenance 
costs  over  the  horizon.  This  policy  has  a particularly  simple  form,  depend- 
ing only  on  two  critical  numbers.  The  computation  of  these  numbers  can  also 
be  reduced  to  simple  computations. 

An  invited  paper  on  "Recent  Developments  in  Reliability  Theory,"  was 
presented  at  the  Seventh  Conference  on  Stochastic  'Processes  and  Their 
Applications  at  Twente  University  of  Technology,  Enschede,  The  Netherlands, 
15-19  August  1977.  An  abstract  of  the  talk  is  attached  with  this  report. 

Professor  Kjell  Doksum  was  partially  supported  by  this  grant  during 
summer  1978.  His  paper  on  "Rank  Tests  for  the  Matched  Pair  Problem  with 
Life  Distributions"  is  partially  credited  to  this  grant. 

Professor  Sheldon  Ross  has  credited  his  paper,  "Approximations  in 
Finite  Capacity  Multi-Server  Queues  with  Poisson  Arrivals,"  in  part  to 
this  grant. 
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AVAILABILITY  ANALYSIS  Of  THE  SITPERHILAC  ACCELERATOR 


Analysis  of  Two  Years  of  Operating  Data  froa  the 
Lawrence  Berkeley  Laboratory 


• by 


Richard  E.  Barlow 

Department  of  Industrial  Engineering 
and  Operations  Research 
University  of  California,  Berkeley 

and 


Ton  Y.  Liang 

Operations  Research  Center 
University  of  California,  Berkeley 


Records  of  26  months  of  operating,  repairing,  and  maintaining  the 
nuclear  accelerator  Superhilac  at  the  Lawrence  Berkeley  Laboratory 
U-C.L)  are  analyzed  with  respect  to  system  availability  and  reliability. 

A major  portion  of  the  report  is  devoted  to  building  a suitable  model 
for  the  availability  analysis.  Some  specific  recommendations  for  im- 
provement are  also  given.  The  current  availabilities  for  operating  the 
machine  in  Modes  1,  2,  and  3 are  64.8%,  76.9%,  and  80%  respectively. 

The  Adam  injector  is  most  responsible  for  causing  the  current  low 
availability  level  of  Mode  1.  An  increase  of  15  hours  on  top  of  the 
current  MTBF  of  22.74  hours  for  the  Adam  injector  (.or,  a decrease  of 
about  2 hours  froa  its  current  MTTR  of  5.15  hours)  would  result  in  an 
overall  boost  of  5.6%  for  Mode  1 availability.  (See  Chapter  3 and 
Appendix  2 for  additional  recornmenuations. ) Either  way,  this  would 
translate  into  about  6 more  usable  hours  every  4 days  of  operations 
for  Mode  1. 

Scce  optimization  schemes  (when  the  costs  associated  with  improving 
the  various  equipments  are  known)  are  indicated  for  obtaining  specific 
adjustments  to  be  made  systemwide  in  order  to  achieve  economically  an 
assigned  higher  availability  level.  Such  models  and  schemes  can  easily 
be  adapted  to  future  needs  as  the  information  gathering  system  evolves 
in  the  near  future  into  an  organic  computer  network  capable  of  collect- 
ing and  analyzing  much  more  voluminous  and  accurate  data. 

Also  included  are  system  reliability  and  miscellaneous  findings  from 
Time  Series  Analysis  and  Total  Time  on  Test  Plots. 
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AVAILABILITY  THEORY  FOR  SYSTEMS 
WHOSE  COMPONENTS  ARE  SUBJECT 
TO  VARIOUS  SHUT-OFF  POLICIES 

by 

R.  E.  Barlow 
E.  Sid 

Barlow  and  Proschan  [1]  derived  limiting  series  system  availability 
assuming  non-field  components  are  in  "suspended  animation"  at  system  failure 
and  until  repair  is  completed.  Limiting  results  in  this  case  depend  only 
on  distribution  means.  When  this  model  is  modified  so  that  some  non-failed 
components  continue  to  operate  after  system  failure,  limiting  availability 
is  no  longer  just  a function  of  distribution  means.  Consider  a two  component 
series  system  with  failure  distributions.  F^  , F^  and  repair  distributions 
0^,62.  If  either  F^  or  is  IFR  (DFR)  and  all  other  distributions 

are  exponential,  limiting  availability  is  greater  (less)  than  in  the 
exponential  case.  If  G2  is  IFR  (DFR)  and  all  other  components  are  expo- 
nential, .limiting  availability  is  less  (greater)  than  in  the  exponential  case. 
For  F2  genei-al  and  all  other  distributions  exponential,  limiting  avail- 
ability is  the  same  as  in  the  exponential  case.  Availability  formulas  for 
series  systems  with  more  than  two  components  and  various  shut-off  policies 
are  obtained  for  exponential  case. 
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Reference 


[1]  Barlow,  R.  E.  and  F.  Proshan,  "Availability  Theory  for  Multicomponent 
Systems,"  Multivariate  Analysis  III,  Academic  Press,  pp.  319-335, 
(1973). 


MONOTONE  HAZARD  AND  FAILURE  RATES  FOR  MULTIVARIATE  DISTRIBUTIONS 


H.  W.  Block 


ABSTRACT 


It  is  shown  that  the  monotone  multivariate  hazard  and 
failure  rates  of  Harris  and  of  Brindley  and  Thompson  have  no 
natural  analog  involving  the  multivariate  failure  rate 
function  of  Basu  for  absolutely  continuous  distributions. 
Quantities  related  to  the  multivariate  failure  rate  function 
are  used  to  define  monotone  hazard  and  failure  rates.  It  is 
shown  that  these  are  equivalent  to  the  monotone  hazard  and 
failure  rates  of  Harris  and  of  Brindley  and  Thompson.  Based 
on  these  quantities,  the  loss  of  memory  property  of  Marshall 
and  Olkin  is  characterized. 


FAILURE  DATA  ANALYSIS  OF  THE 


SUPERHILAC  RADIO  FREQUENCY  SUBSYSTEM 


This  report  is  a follow-up  of  the  study  done  by  Liang  [1],  [2J  in  1977 
to  investigate  new  techniques  for  analyzing  SuperHILAC  system  availability 
Recent  and  more  accurate  data  are  used  and  emphasis  is  on  the  Radio 
Frequency  (RF)  subsystem  and  its  components.  Time  Series  Analysis  and 
Total  Time  on  Test  plots  are  the  main  tools  used  in  the  analysis. 
Recommendations  for  the  improvement  of  RF  availability,  general  SuperHILAC 
performance,  and  the  data  collecting  process  are  given.  The  primary 
result  suggests  th^t  the  RF  operating  period  should  be  extended. 


A RENEWAL  DECISION  PROBLEM 


C.  Herman 
G.  J.  Lieberinan 
S.  M.  Ross 

ABSTRACT 

A system  must  operate  for  t units  of  tine.  A certain  component 
is  essential  for  its  operation  and  must  be  replaced,  when  it  fails, 
with  a new  component.  The  class  of  spare  components  is  grouped  into 
r.  categories  with  components  of  the  ith  category  costing  a positive 
amount  Ci  and  functioning  for  an  exponential  length  of  tine  with 
rate  A^  . The  main  problem  of  interest  is,  for  a given  t , to 
assign  the  initial  component  and  subsequent  replacements  from  among 
the  n categories  of  spare  components  so  as  to  minimize  the  expected 
cost  of  providing  an  operative  component  for  t units  of  time. 

In  Section  1 we  show  that  when  there  are  an  infinite  number  of 
spares  of  each  category,  the  optimal  policy  has  a simple  structure. 
Lamely,  the  time  axis  can  be  divided  up  into  n intervals,  soma  of 
which  nay  be  vacuous,  such  that  when  a replacement  decision  has  to  be 
made  it  is  optimal  to  select  a spare  from  the  category  having  the  ith 
largest  value  of  AC  whenever  the  remaining  time  falls  into  the  ith 
closest  interval  to  the  origin.  In  Section  2 we  consider  the  situ- 
ation where  n = 2 and  there  is  only  a single  spare  of  one  category 
and  an  infinite  number  of  the  other.  In  Section  3 we  consider  the 
case  where  there  is  only  a finite  number  of  spares  for  certain  of  the 
categories  under  the  assumption  that  a rebate  is  allowed  for  the 
component  in  use  at  the  end  of  the  problem.  In  Section  4 we  allude  to 
a generalization  of  the  model  in  Section  1 allowing  for  discounting  or 
for  the  possibility  that  the  system  may  randomly  terminate  before  the 
t units  of  time  expire.  An  optimal  policy  has  the  same  simple 
structure,  ns  in  Section  1. 
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RANK  TESTS  IDR  THE  MATGIED  PAIR 
PROBLEM  WITH  LIFE  DISTRIBUTIONS 

by 

K.  Doksum 


We  consider  matched  pair  experiments  where  the  measurements  (x^,yp  in 
each  pair  are  tine  measurements  such  as  failure  tines  in  a reliability  study. 
A matched  pair  experiment  is  a simple  block  design  where  pairs  are  formed  to 
block  out  nuisance  factors.  For  example,  matched  pairs  could  be  two  brands 
for  the  front  tires  of  a car  (where  differences  between  cars  are  then  blocked 
out),  a side  of  a house  with  the  left  and  right  halfs  painted  with  two  makes 
of  paints,  etc. 

If  the  shape  of  the  failure  time  distributions  are  not  known,  it  makes 
sense  to  consider  rank  test.  We  considered  three  classes  of  such  tests: 

(i)  The  class  of  signed  rank  tests  based  on  the  signed  ranks  of 
(y^  - x^}.  Here  a test  based  on  an  exponential  scores  statistic  turns  out 
to  have  good  power  properties  in  reliability  models. 

(ii)  A class  of  signed  rank  tests  based  on  the  signed  ranks  of 
{log  y^  - log  x^}.  The  Wilcoxon  signed  rank  test  has  good  power  properties 
in  reliability  models  for  this  class.  We  show  that  each  isotonic  signed  rank 
test  has  isotonic  power  with  respect  to  tail  ordering  as  defined  in  [1]. 

(iii)  Invariance  considerations  leads  to  conditional  tests  based  on  the 
joint  ranks  of  {x^y^}.  In  this  class,  an  exponential  score  (Savage)  sta- 
tistic is  optimal  (in  the  minimax  sense)  over  the  class  of  IFRA  distributions. 
Isotonic  conditional  rank  tests  have  isotonic  power  with  respect  to  tail 
ordering. 

[1]  Doksum,  K.A.  (1969).  "Starshaped  transformations  and  the  power  of  rank 
tests”,  Ann.  Math.  Statist.,  pp.  1167-1176. 


QUEUEING  MODELS  FOR  MULTIPLE  CHAMBER  LOCKS 


C.  R.  Glassey 
and 

S.  M.  Ross 

ABSTRACT 


Several  nodels  for  predicting  neaa  waiting  tines  of  river  traffic 
at  a multiple  chamber  lock  ware  developed  and  tested.  Mean  vaiting 
times  predicted  by  tha  M/G/l  model  differed  significantly  from 
observed  times.  Analysis  of  possible  causes  of  failure  of  this 
model  suggested  a limited  queue  length  M/G/l  nodel  for  one  chamber, 
from  which  more  accurate  predictions  were  derived.  For  the  two 
chamber  system,  an  M/G/l  model  with  random  batch  size  was  developed 
This  model  yields  a lower  bound  for  mean  waiting  time.  These  last 
two  monels  can  be  used  to  predict  system  performance  under  various 
operating  conditions. 


BAYESIAN  LIFE  TESTING  USING  THE  TOTAL  Q 


ON  TEST 


W.  S.  Jewell 


ABSTRACT 


Suppose  the  basic  shape  of  the  cumulative  failure  (hazard) 
function  has  baen  identified  for  a certain  component,  and 
that  an  unknown  parameter  0 for  a new  production  run  of 
similar  components  is  to  be  estimated.  In  particular, 
suppose  that  the  failure  function  is  of  proportional  type, 
R(x)  ~ 0Q(x)  , where  Q is  the  known  shape  function,  and 
that  G is  sampled  from  a prior  gamma  density.  By  using 
a new  statistic,  cal.'ed  the  total  Q on  test  (TQT),  it  is 
possible  to  perform  Bayesian  updating  during  a variety  of 
lifetime  testing  programs  in  a manrer  similar  to  total  time 
on  test  plots.  This  statistic  can  also  he  used  with  com- 
plete lifetime  data,  extending  over  several  product  runs, 
to  identify  the  failure  form  Q , and  to  estimate  the  gamma 
hyperparameters.  Extensions  include  the  use  of  several 
TQT  statistics  to  estimate  the  relative  strength  of  compet- 
ing hazard  functions. 


APPROX IMAT IONS  IN  MULTI-SERVER  I'OISSON  QUEUES 

Shirley  A.  Nozaki 
and 

Sheldon  M.  Koss 


AUSTRACT 


Our  major- objective  is  to  obtain  an  approximation  for 
the  average  time  spent  uniting  in  queue  by  a customer  in  an 
ti/G/k.  queueing  system — call  it  . This  is  done  by  means 
of  an  approximation  assumption  presented  in  Section  2,  which 
is  shown  to  be  asymptotically  valid  both  in  heavy  and  in 
light  traffic.  In  Section  3,  the  approximation  assumption 
is  used  to  derive  an  approximation  for  W . Numerical 
comparison  v-’ith  tables  given  by  Hillier-l.o  in  the  special 
case  of  Erlang  service  times  indicate  that  the  approximation, 
which  depends  on  the  service  distribution  only  through  its 
first,  two  moments,  works  remarkably  well.  In  addition,  ns 
by-product  oE  our  analysis,  we  also  obtain  approximations 
fcr  the  distribution  of  the  number  of  busy  servers  and  the 
mean  length  and  number  of  customers  in  a busy  period.  These 
latter  approximations  depend  on  the  service  distribution  only 
through  its  mean. 

Jn  Section  A,  vc  show  that  the  approximation  assumption 
is  valid  and  loads  to  the  exact  result  in  the  case  of  a 


limited  capacity  system  where  no  queue  is  allowed  to  form. 
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APPROX . M 7 IONS  IN  FINITE  CAPACITY 
MULTI-SERVER  QUEUES  WITH  TOISSON  ARRIVALS 

Shirley  A.  Nozaki 
and 

Sheldon  M.  Ross 


ABSTRACT 


In  this  paper,  we  consider  an  M/G/k  queueing  model  having 
finite  capacity  N . That  is,  a model  in  which  customers, 
arriving  in  accordance  with  a Poisson  process  having  rate 
A , enter  the  system  if  there  are  less  than  N others 
present  when  they  arrive,  and  are  then  serviced  by  one  of  k 
servers,  each  of  whom  has  service  distribution  G . Upon 
entering,  a customer  will  either  immediately  enter  service 
if  at  least  one  server  is  free  or  else  join  the  queue  if  all 
servers  are  busy.  Our  results  will  be  independent  of  the 
ord:r  of  service  of  those  waiting  in  queue  as  long  as  it  is 
supposed  that  a server  will  never  remain  idle  if  customers 
ar  waiting.  To  facilitate  the  analysis,  however,  we  will 
s .ppose  a service  discipline  of  "first  come  first  to  enter 
service." 


-• sc-.  ..  _ _ . .1 
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OPTIMAL  REPAIRMAN  ALLOCATION  MODELS 

D.  K.  Smith 

ADS  I'ilAGT 


A system  of  n components  under  the  care  of  one  repairman 
Jr.  modeled.  The  component:;  arc  subject  to  failure,  vli cro- 
up an  they  nay  he  repaired  one  at  a tine.  It  is  desired  to 
repair  failed  components  in  such  a maimer  that  the  ergodic 
probability  that  the  system  works  is  maximized. 

It  is  assumed  that  each  component  and  the  system  as  a whole 
can  be  either  working  or  failed,  with  the  relationship 
between  the  working  of  the  system  and  the  working  of  the 
components  given  by  a coherent  structure  function.  The  time 
a component  works,  or  the  tine  to  repair  a component  is  an 
exponential  random  variable  of  known  rate.  All  components 
are  independent,  and  at  most  one  component  may  he  under 
repair  at  a given  time. 

[•■  Although  the  general  problem  is  in  principle  soluble  by 

known  methods,  computational  difficulties  are  enormous  for 
moderate,  sized  systems.  In  addition,  such  methods  give  no 
general  insight  into  the  structure  of  the  optimal  policy. 
Therefore,  bounds  and  approximations  for  general  systems  are 
highly  useful. 

One  bound  for  the  optimal  ergodic  probability  that  the 
system  works  is  given  by  the  ergodic  probability  that  the. 
system  works  under  a particular  policy.  The  time  reversible 
policy  given  yields  easily  obtainable  ergodic  probabilities 
for  all  states,  and  is  useful  for  bounding  purposes. 

Most  real  systems  are  highly  reliable  in  nature.  1’arametri- 
zation  of  the.  rates  of  the  exponential  random  variables 
given  earlier  allows  investigation  of  asymptotic  system 
properties  as  the  system  becomes  very  reliable.  Specifi- 
cally, for  a given  policy,  the  asymptotic  ergodic  probability 
of  all  states  and  the  asymptotic  passage  tires  between  states 
ray  be.  computed.  These  results  allow  one  to  obtain  the. 
asymptotic  optimal  unreliability  of  an  arbitrary  system,  and 
to  obtain  the  asymptotically  optical  policy  for  assignment  of 
the  repairman  in  many  cases.  Intuitively,  the  asymptotically 
optimal  policy  is  close  to  optimal  for  highly  reliable 
systems. 

Although  highly  unreliable  systems  occur  less  frequently, 
such  systems  ray  l>e  treated  in  a similar  manner  with  similar 
results. 

■ • 

Two  specific  examples  of  systems  are  treated  in  the  paper: 
the  series  system  and  an  arbitrary  system  of  stochastically 
identical  components.  The  series  system  occurs  often  in 
practice,  since  many  simple  systems  cannot  tolerate  failure, 
of  any  components. 


These  tvo  or.::  pi  es  3<-.d  It*  i datively  simple  -'solution:; 
Arbitrary  r.yst » ; . • : i • r r*  1 1 y do  not.  The  tvo  component 


y :■  ml  1 cl  system  yields  a fairly  conpl  i cat  ed  criterion  for 
choosing  l>e  t veon  the  t to  pot  erst  in  11  y opti:  t]  policies. 

When  the  series  ays; ten  is  couponed  of  components  whose 
failure  rates  ere  identical,  the  ergo die  probability  that 
the  system*  works  is  independent  of  policy. 

lor  the  tvo  component  Series  system,  it  is  optimal  to  repair 
the  longer  expected  lifetime  component  first,  end  this  is 
true  even  if  the  repairman  is  subjected  to  random  intervals 
during  which  he  is  not  allowed  to  work. 


lor  an  n component  series  system,  the  optical  policy  seemt 
to  he  to  repair  the.  components  in  order  of  increasing 
expected  lifetimes.  This  result  can  he  proven  if  the 
optimal  policy  can  be  written  as  a list,  but  a core  general 
proof  seems  to  be  elusive. 

When  a system  is  composed  of  stochastically  identical 
components,  it  is  often  possible  to  eliminate  most  policies 
f rom  consideration.  Two  examples  of  this  technique  are 
given,  including  one  in  which  the  optical  policy  is 
explicitly  obtained. 
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I.  INVITED  REVIEW  AND  RESEARCH  PAPERS 


Recent  developments  in  reliability  theory 

RICHARD.  K.  BARLOW,  University  of  California  at  Berkeley 

The  key  paper  of  Block  and  Sacks  (1976)  has  been  used  by  Ross  (1977)  to 
extend  the  ikra  closure  theorem  (Birnbauni,  Esary  and  Marshall  (1966))  to 
multi-state  coherent  systems.  'Hie  key  result  is  that  if  Tlt  T2,  ■ ■ ■ , Tn  arc 
independent  ifra,  then 


[ Eh*  p. 

2, 

• iir 

L \a 

a ’ 

« /J 

is  1 in  a >0  for  all  h g0  and  /if. 

An  immediate  corollary  is  that  if  g is  f and 

-g(aT) 

a 

is  i in  cr>0  for  all  T-(Tlt  T2,  — , T„),  then  g(T,,  T2,  • • • , 7„)  is  ifra.  For 
min  cut-sets  Klt  K2 , • • • , Kk  and 

gCT)=  min  max  Tj 

lTitSIc  i € Kt 

we  have  the  ikra  closure  theorem.  For  g(T)-Tl+T2  + - ■ - + Tn  we  have  the 
ikra  convolution  theorem. 

Block  and  Sa\its  (1977)  define  T1(  T2,  • • ■ , 7’„  to  be  multivariate  ifra  if  1) 
holds.  Let  A'(f)  be  the  state  {0,  1, 2,  • • • , «}  of  component  /.  If  X,(t)  is  i in 
ISO, 

Tk=sup{i|.Vi(r)&A:} 

and  T„  7'2,  • • • , Tm  are  multivariate  ifra,  then  {X,(l);  ISO}  is  an  ikra  failure 
process. 

If  <f>  f,  then 

is  also  an  ifra  failure  process. 

Bo  Bergman  in  Sweden  (see  e.g.  Bergman  (1978))  obtains  optimal  mainte- 
nance policies  for  multi-state  components.  Bob  Smith  at  Columbia  University 
obtains  optimal  policies  for  coherent  systems.  Barlow  and  Campo  (1975)  show 
how  ifra  and  other  classes  may  be  tentatively  identified  from  data. 
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